Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: n1b8T736sKHXmwJmbDcERZlNMkXqhA91mHQ9OaSHMr8=
Subject key identifier: F3:78:60:6D:FE:BA:4F:A8:F7:AE:08:F6:45:49:47:16:EB:15:07:46
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019A722610CE84E22391D88BEE65AD2C8C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: L/GxIn2hfsoY0ptzFcy+CFr78WOrM7Cuo0xrlr939nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:10:ce:84:e2:23:91:d8:8b:ee:65:ad:2c:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=f378606dfeba4fa8f7ae08f645494716eb150746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:2f:ed:a6:39:72:15:54:32:ee:49:e0:82:
96:e5:71:8b:4b:a2:5c:6d:ad:38:4c:df:27:1b:f2:
46:2e:81:21:58:d9:54:fe:38:7b:95:1c:be:99:97:
a2:92:9e:ff:ac:df:d4:8b:c6:95:d6:e0:11:31:f7:
6d:a2:2a:05:17:96:36:7c:b6:81:12:67:9e:3f:2c:
2e:b6:72:67:28:9e:db:e6:43:1f:b4:fd:88:b8:e9:
d7:a4:0d:a8:1b:d1:74:38:27:8a:39:1f:52:81:9e:
13:d9:78:06:c3:90:fb:b9:ea:5e:fb:85:51:99:3d:
5f:cb:90:97:25:8f:64:ed:34:0e:6f:ea:10:52:51:
b7:f8:c2:c7:8b:71:3a:55:d9:e6:10:84:99:fb:07:
cc:50:02:e6:90:72:7b:8a:3a:d3:8c:f3:19:86:f6:
ac:3c:1d:0b:40:7e:70:b1:3f:5f:97:5d:54:0c:6f:
6f:8c:82:a6:2c:3c:39:6d:14:84:18:90:95:7c:3e:
24:fb:70:10:3d:22:d7:d5:69:80:a1:0d:77:12:48:
4a:78:6f:24:46:e4:16:d0:e2:c9:63:ef:23:a2:81:
29:fd:24:64:8f:b9:d4:8f:58:c3:d9:06:13:e0:16:
ef:35:d4:32:73:6f:84:8f:ed:12:b9:c4:c4:d4:b8:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:78:60:6D:FE:BA:4F:A8:F7:AE:08:F6:45:49:47:16:EB:15:07:46
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3d:f2:76:db:5c:a3:8f:99:ea:0d:3d:19:ed:26:b2:f4:ee:
83:61:b4:dd:50:3a:3a:5a:38:c4:5f:fc:95:b4:95:81:6a:fd:
87:d7:bb:7d:14:ec:08:03:6b:65:93:dd:72:b5:aa:c7:79:54:
56:d0:87:52:20:f5:de:50:c0:2e:2e:9a:f6:bf:38:f5:17:3f:
08:5e:c9:e8:68:72:07:c1:82:fb:07:4a:eb:0a:0e:c4:1a:52:
1f:2a:a0:76:3a:47:3b:33:19:b3:9a:0c:ab:9f:ca:e0:3c:a3:
32:21:d5:94:a9:bb:c4:60:d7:90:46:72:83:c2:cc:ba:4a:2c:
03:ec:2c:59:00:9e:32:b8:ca:82:32:2b:bb:dd:19:34:a0:28:
33:ef:1e:33:72:5f:b8:e8:36:ac:42:ac:5a:34:d9:bf:b2:fe:
b9:b9:95:b1:c5:88:39:9c:b0:93:c5:1b:fd:cd:dd:08:9f:f4:
b4:79:82:04:e0:80:e6:f3:24:1e:78:34:d9:9a:46:38:4d:e1:
fd:f0:77:20:bc:10:8f:32:69:f6:15:d4:17:c3:ec:30:87:76:
61:e4:4d:a3:90:e4:75:fc:44:77:81:65:7a:ec:a0:4c:83:ce:
59:49:c4:3c:f5:7b:eb:73:b6:64:14:1e:1b:9e:07:8e:8c:d6:
38:fe:0b:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJhDOhOIjkdiL7mWtLIwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDIxM2FiYTFlYTkyOGI5ZWQzMjQ5MWRlOWJhMTA0NjRi
MDYzNmMwHhcNMjUxMTExMDkwMTI4WhcNMjUxMTEyMDkwMTI4WjAzMTEwLwYDVQQD
EyhmMzc4NjA2ZGZlYmE0ZmE4ZjdhZTA4ZjY0NTQ5NDcxNmViMTUwNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKsv7aY5chVUMu5J4IKW5XGLS6Jc
ba04TN8nG/JGLoEhWNlU/jh7lRy+mZeikp7/rN/Ui8aV1uARMfdtoioFF5Y2fLaB
EmeePywutnJnKJ7b5kMftP2IuOnXpA2oG9F0OCeKOR9SgZ4T2XgGw5D7uepe+4VR
mT1fy5CXJY9k7TQOb+oQUlG3+MLHi3E6VdnmEISZ+wfMUALmkHJ7ijrTjPMZhvas
PB0LQH5wsT9fl11UDG9vjIKmLDw5bRSEGJCVfD4k+3AQPSLX1WmAoQ13EkhKeG8k
RuQW0OLJY+8jooEp/SRkj7nUj1jD2QYT4BbvNdQyc2+Ej+0SucTE1LgWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN4YG3+uk+o964I9kVJRxbrFQdGMB8GA1UdIwQY
MBaAFGMCE6uh6pKLntMkkd6boQRksGNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQt
OGY0YzU5ZWMyMGJlLzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQtOGY0YzU5ZWMyMGJl
LzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqj3ydttc
o4+Z6g09Ge0msvTug2G03VA6Olo4xF/8lbSVgWr9h9e7fRTsCANrZZPdcrWqx3lU
VtCHUiD13lDALi6a9r849Rc/CF7J6GhyB8GC+wdK6woOxBpSHyqgdjpHOzMZs5oM
q5/K4DyjMiHVlKm7xGDXkEZyg8LMukosA+wsWQCeMrjKgjIru90ZNKAoM+8eM3Jf
uOg2rEKsWjTZv7L+ubmVscWIOZywk8Ub/c3dCJ/0tHmCBOCA5vMkHng02ZpGOE3h
/fB3ILwQjzJp9hXUF8PsMId2YeRNo5DkdfxEd4FleuygTIPOWUnEPPV763O2ZBQe
G54HjozWOP4L4A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:33 2025 by rpki-client